FieryFilter 0.4

FieryFilter is an interactive desktop firewall for Linux

Developer:	Lennart Poettering more software by author →
Price:	0.00
License:	GPL (GNU General Public License)
File size:	153K
Language:
OS:
Rating:	0 /5 (0 votes)
Your vote:
enlarge screenshot

FieryFilter is an interactive desktop firewall for Linux. FieryFilter will ask you everytime a new network connection is made if you want to allow or deny it.

Fieryfilter is far from being usable. Currently the rule generation is incomplete. Please join development if you want to have it working faster.

Requirements:

Linux 2.4 with Netfilter and ip_queue

Gtk 2.2.1

libipq

Good knowledge of Netfilter, iptables and especially Linux

Compilation:

configure && make

Installation:

make install (as root)
cp fieryfilter.init /etc/init.d/fieryfilter

You will need to create a new group fieryfilter and place all users which want to use FF in it.

Usage:

FF is split into two distinct programs: fieryfilterd and fieryfilter. The former is the FieryFilter daemon, the latter the FieryFilter frontend application:

fieryfilterd should be run as root and will plug itself into the Netfilter ip_queue subsystem. Every packet which is pushed into the QUEUE Netfilter target is recieved by ffd.

fieryfilter is a GTK client to be run in a user environment. It connects through a UNIX socket to ffd and is notified on every incoming packet. It will popup a dialog box showing some information about the packet and ask the user if he wants to accept, drop or reject it. The user's decision is sent to ffd, that process will finally execute the user's command.

Access to fieryfilterd is only granted to users in the group "fieryfilter".

If no instance of fieryfilter is connected to ffd, the daemon will accept every single connection automatically.

You have to run the fieryfilter daemon by using the supplied init script first (as run). You may not run it "by hand", since your local firewall is set up correctly for this. After that you may run the client program fieryfilter as normal user.

FieryFilter has some memory leaks currently. This will be fixed as soon as I find time to do it.
tags

the fieryfilter the user run the you may fieryfilter daemon group fieryfilter you want into the

Download FieryFilter 0.4

http://0pointer.de/lennart/projects/fieryfilter/fieryfilter-0.4.tar.gz

Authors software

PulseAudio Manager 0.9.3 (by Lennart Poettering)

waproamd 0.6 (by Lennart Poettering)
waproamd is a Linux WLAN roaming daemon for IEEE 802.11b cards supported by a driver with the wireless extension API

heatload 0.3 (by Lennart Poettering)
heatload is a tool for Linux which plots the CPU load against the CPU temperature as measured by the ACPI subsystem.

Installation:

ifplugd 0.27 (by Lennart Poettering)
ifplugd is a Linux daemon which will automatically configure your ethernet device when a cable is plugged in and automatically unconf

libasyncns 0.1 (by Lennart Poettering)
libasyncns is a C library for Linux/Unix for executing name service queries asynchronously

Similar software

FieryFilter 0.4 (by Lennart Poettering)
FieryFilter is an interactive desktop firewall for Linux

DNS Blacklist Packet Filter 0.6 Beta1 (by Russell Miller)

Layer-7 Packet Classifier for Linux 2.7 (by Ethan J. Sommer)
Layer-7 Packet Classifier for Linux is a classifier for the Linux kernel's Netfilter subsystem that identifies packets based on

iptables 1.3.7 (by Harald Welte)
iptables and netfilter are building blocks of a framework inside the Linux 2.4.x and 2.6.x kernel

Linux Firewall 2.0 (by Scott Bartlett)
Linux Firewall is a robust, well-designed firewall for Linux 2.4 based on netfilter/iptables

perlipq 1.25 (by James Morris)
Perlipq is a Perl extension to Linux iptables userspace queueing via libipq.Packets may be selected from the stack via the iptables Q

fwknop 1.0 (by Michael Rash)
fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme based around Netfilter and libpcap that requi

fireflier 1.99 Beta2 (by Martin Maurer)
fireflier is a firewall tool, which is built on top of the iptables framework

narc 0.7 (by Shane Chen)
NARC is a free firewalling package for Netfilter/Iptables

Network-Accounting Daemon for Netfilter 0.4.3 (by Hilko Bengen)
ulog-acctd is a userspace network accounting daemon which generates log files of network traffic for accounting purposes.

I had tr

Other software in this category

Nmap 4.20 (by Fyodor)
Nmap is a utility for network exploration or security auditing

iptables 1.3.7 (by Harald Welte)
iptables and netfilter are building blocks of a framework inside the Linux 2.4.x and 2.6.x kernel

Linux Bandwidth Arbitrator 9.62 (by astormchaser)
Linux Bandwidth Arbitrator allows beginning-to-advanced network administrators to control bandwidth

Ettercap 0.7.3 (by ALoR NaGA)
Ettercap is a network sniffer/interceptor/logger for ethernet LANs

rdesktop 1.5.0 (by matthewc)
rdesktop is an open source client for Windows NT Terminal Server and Windows 2000/2003 Terminal Services, capable of natively speakin